Data breach at DoorDash sees 4.9 million users’ personal information stolen

An undisclosed number of Canadians are among the roughly 4.9 million DoorDash users, drivers and merchants who had their personal information stolen during a May data breach — the latest in a string of privacy scares in recent years.

“We don’t discuss overall user, merchant or Dasher numbers publicly,” wrote spokesperson Mattie Magdovitz in an email when asked how many of the millions impacted were in Canada.

Those whose information was compromised would have been contacted directly by the company, Magdovitz said.

The California-based company is encouraging users to change their passwords via a dedicated reset site, and has set up a call centre for round-the-clock support.

“… Out of an abundance of caution, we are encouraging all of those affected to reset their passwords to one that is unique to DoorDash,” reads an email received by a Canadian customer in Toronto.

The company operates in Toronto, as well as Calgary, Edmonton, Ottawa, Montreal, Regina, Vancouver, Winnipeg and several other Canadian cities.

But the company said only some — not all — of those who started using the app on or after April 5, 2018 were affected.

“For security reasons and because our investigation is still ongoing, I cannot get into specific details,” wrote Magdovitz, when asked why that particular date marked the cutoff.

The date is prior to the company launching operations in some of its Canadian locations. DoorDash became available in Winnipeg this May, for example, and Montreal in August.

Earlier in September, the company noticed what it called “unusual activity involving a third-party service provider,” it said in a statement posted to its blog Thursday. It launched an investigation that included outside security experts and determined some DoorDash user data was accessed on May 4.

It “took immediate steps to block further access” by that party and enhanced its security, the company said.

DoorDash notified law enforcement and regulators, and is assisting them in their ongoing investigation, said Magdovitz.

The stolen data may include profile information, such as users’ names, email addresses, delivery addresses and phone numbers. It may also include “hashed, salted passwords,” which the company said make the actual password indecipherable to a third party.

It appears some consumers also had the last four digits of their payment cards taken, while some drivers and merchants had the last four digits of their bank account numbers stolen.

However, the company said the perpetrator or perpetrators did not obtain enough information to make fraudulent charges or withdrawals.

About 100,000 drivers had their driver’s license numbers stolen.

The DoorDash breach is one of several large-scale privacy invasions in recent years.

A data breach at Capital One in July exposed the data of about six million Canadians, including roughly a million social insurance numbers, as well as the data of about 100 million American clients.

In June, Desjardins Group revealed a data breach there affected nearly three million members, including individuals and businesses. Names, addresses, birthdates, social-insurance numbers and other private information was leaked.

And in 2017, some 19,000 Canadians had their data compromised as part of a broader breach at Equifax Inc. The breach impacted nearly 150 million people, including the Canadians.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Teachers condemn government’s actions towards doctors

“That they should be treated with such contempt is deeply disturbing”

Central Alberta centre gets more provincial dollars to deal with rising caseload of abused children

CEO Mark Jones expects to be helping 1,000 abused kids annually by 2024

Crime significantly reduced in Lacombe County subdivision when gate installed

Two-year pilot project at Westside Country Estates prompts county to adopt a gate policy

Security for empty nursing home is pricier than it would have been to knock it down

Provincial taxpayers have now paid more to mothball a former nursing home… Continue reading

Birds move into new wildlife hospital

Medicine River Wildlife Centre to host grand opening this spring

Fashion Fridays: The 8 best quality online stores! Shop the ultimate sales

Kim XO, helps to keep you looking good on Fashion Fridays on the Black Press Media Network

Your community calendar

Feb. 19 A Liberation of Holland event is being held at the… Continue reading

Northern Ontario’s Krista McCarville claims Tournament of Hearts playoff berth

MOOSE JAW, Sask. — Protective of their curl-life balance, Krista McCarville and… Continue reading

Gary Harris’s generosity helped shape our college, and our city, writes Joel Ward

I was deeply saddened to learn of Gary Harris’s passing. I first… Continue reading

A teen’s perspective: Ordinary Canadians are paying a price for railway blockades

The following is a letter by Alberta teenager Liam Smith to his… Continue reading

Bashaw filmmakers capture grasslands’ beauty

Documentary showcases how a unique ecosystem is surviving

Trudeau: Time for blockades to end and Indigenous leaders to work with government

Prime minister says situation in Coastal GasLink pipeline dispute is ‘unacceptable and untenable’

Diamond Princess evacuees arrive for quarantine in Canada

OTTAWA — A plane carrying 129 Canadians and their families who have… Continue reading

U.S., Taliban truce takes effect, setting stage for peace deal

ISLAMABAD — A temporary truce between the United States and the Taliban… Continue reading

Most Read